> Is it expect that user generate, sign and put certs in those location before the installation?

By default, the pki cert/ca is re-used (or abused) in order to have sth. working. But yes, in a production environment, the cloud admin is supposed to generate properly signed certs and put it into the appropriate location. With SUSE Cloud 1.0, we had a mechanism in place that automatically generates (Self-signed) demo certs to get started. However, we can't really provide a transfert mechanism ATM, since that would go over Crowbar's UI which would need to be SSL'ified too for it to be secure. It's a chicken'n'eggs situation. Although one could define the cloud as secure as long as it is not used by tenants...

> There is no documentation and i'm complete don't get this thing.

I guess that's in line with the rest of Crowbar ATM :-)